This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft
File: C9q2CGF_PDGDxHD05hmyeV91w4k.mft (raw, json)
Hash identifier: 4D4OFqZAF/ySVVSjxe8nJdR7Ce2ykk7QD9/lzw3THrU=
Subject key identifier: 26:95:6B:29:BF:8D:2A:21:C8:C8:B1:A5:A7:5D:42:A2:56:F4:99:A8
Authority key identifier: 0B:DA:B6:08:61:7F:3C:31:83:C4:70:F4:E6:19:B2:79:5F:75:C3:89
Certificate issuer: /CN=A91326B3/serialNumber=0BDAB608617F3C3183C470F4E619B2795F75C389
Certificate serial: 0153
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C9q2CGF_PDGDxHD05hmyeV91w4k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft
Manifest number: 014F
Signing time: Wed 31 Dec 2025 03:21:44 +0000
Manifest this update: Wed 31 Dec 2025 03:21:43 +0000
Manifest next update: Wed 07 Jan 2026 03:21:43 +0000
Files and hashes: 1: C9q2CGF_PDGDxHD05hmyeV91w4k.crl (hash: UZA2xXbcxMSu2hltGt16ckbXBd5AqgAg1u3yceSYKnY=)
2: E3ABAA7AE69211EEB34D4B6AC4F9AE02.roa (hash: EyKD4I3R8YSy4asXY+8xvf07IP4owJwI772hb1AAhAw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.crl
rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C9q2CGF_PDGDxHD05hmyeV91w4k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 07 Jan 2026 03:21:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 339 (0x153)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91326B3, serialNumber=0BDAB608617F3C3183C470F4E619B2795F75C389
Validity
Not Before: Dec 31 03:21:43 2025 GMT
Not After : Jan 7 03:21:43 2026 GMT
Subject: CN=695496c7-aa20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:32:40:79:d5:54:69:f6:9a:19:5d:77:d6:f9:
c6:2b:ea:52:e8:f9:cb:98:0d:56:35:3a:fa:e1:31:
7b:72:50:10:14:df:9c:83:40:0e:e0:0b:93:fd:80:
b2:5d:9b:fd:4c:0f:3b:06:34:f4:4b:de:be:ad:61:
cb:a1:3d:78:49:a6:64:86:2e:46:17:82:fe:82:b5:
30:22:fa:f7:36:fb:a0:1c:3e:16:63:74:88:94:2d:
28:bf:5b:98:ff:35:55:5b:79:31:b3:75:16:60:38:
b0:f8:55:c8:07:79:05:7a:3d:ec:36:e0:af:b3:14:
29:37:24:d5:ff:bc:7d:45:cf:c0:87:d4:8a:d1:1c:
d4:a0:39:85:32:79:d5:ef:dc:b8:d3:6e:f6:ce:e4:
ba:39:a6:6e:5d:74:90:f7:68:dc:14:01:d9:9d:29:
ad:a7:72:e9:75:38:73:76:31:23:87:17:c6:e5:16:
df:8c:da:6a:fe:b4:14:03:97:c5:96:0a:fc:93:62:
86:60:03:21:c1:e4:af:83:b3:1b:c0:09:81:bb:56:
d7:18:7e:8f:2a:5c:ba:f1:55:c5:a6:04:2d:fe:3f:
2f:84:36:c4:6b:fa:d3:c9:4b:ed:35:52:17:d9:a3:
73:52:d3:ec:40:f4:b6:c7:5e:19:4d:76:58:64:92:
a1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:95:6B:29:BF:8D:2A:21:C8:C8:B1:A5:A7:5D:42:A2:56:F4:99:A8
X509v3 Authority Key Identifier:
keyid:0B:DA:B6:08:61:7F:3C:31:83:C4:70:F4:E6:19:B2:79:5F:75:C3:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C9q2CGF_PDGDxHD05hmyeV91w4k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:54:2f:32:99:76:bd:29:11:72:31:11:18:fa:d5:ae:49:36:
29:44:0c:c2:40:1f:b3:84:0a:f3:dd:02:53:b0:42:98:49:1c:
39:3f:05:04:ee:93:03:0d:51:87:8e:2c:0b:9f:0e:16:79:bc:
72:4a:3b:5f:6a:86:39:bc:ea:aa:f7:bb:ef:81:86:dd:99:80:
bc:aa:19:2d:c2:17:8e:c0:55:d7:85:f4:a7:c3:c4:e4:ab:9e:
04:ee:f2:a5:08:cf:0a:80:a5:0d:ac:6d:58:fc:a1:88:66:c0:
ac:7a:77:1d:30:ac:99:8b:f1:66:41:f4:64:d9:ae:d2:6c:43:
e8:89:0a:9e:48:cb:1e:1c:48:e1:8f:8c:b4:c7:aa:5a:23:7d:
1e:9c:9b:a5:a7:8c:d6:be:f3:2a:dd:06:d6:d7:81:75:df:cb:
22:49:b0:cc:f2:e6:00:41:b6:93:e5:ed:d5:10:64:d0:48:b3:
44:3c:bf:76:5b:5e:7a:df:96:c8:ec:2f:4e:a0:1c:b0:c0:9e:
1b:27:f0:de:d7:fa:ea:d9:4a:ce:e2:98:d3:d5:18:bc:a4:02:
58:68:23:32:90:6c:0f:f0:97:f5:d8:2d:c3:ee:f4:d5:f4:ed:
50:d3:bc:9d:81:f4:a5:7a:1f:e2:d7:bb:e0:fd:f9:ef:40:19:
b2:91:6d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 08:17:31 2025 by rpki-client